$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.mft File: 499450bd-6432-4e5d-a29f-1c38c1ea14c6.mft (raw, json) Hash identifier: gdKgTytXjG+6h4xC6tLVz2PQGfvE1/VKCHMmGTrE1xo= Subject key identifier: A7:89:84:14:9C:99:98:A4:E7:F2:87:C3:FC:52:19:F3:5E:A3:BD:04 Authority key identifier: 57:9C:7D:FD:87:30:04:B7:B4:47:8D:03:30:59:10:5D:94:93:79:F1 Certificate issuer: /CN=499450bd-6432-4e5d-a29f-1c38c1ea14c6 Certificate serial: 010D0C9F4328584AEA13FB7B67988204C5F6AE50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.mft Manifest number: 010D0C9F4328584073A837D5DC90CFDD9E2C4A56 Signing time: Wed 20 Aug 2025 02:00:08 +0000 Manifest this update: Wed 20 Aug 2025 02:00:08 +0000 Manifest next update: Fri 22 Aug 2025 02:00:00 +0000 Files and hashes: 1: 499450bd-6432-4e5d-a29f-1c38c1ea14c6.crl (hash: XLY7vUyUfAPMk2PnBjBc4cGnMKXbkxd1bszir7VT+AQ=) 2: c565c5c0-8555-3cb8-bca1-d3a92ed022e8.roa (hash: Bm+AyfjIXa/Ul+iApbOxITj6AehU8mOB2l1LJOqRmH8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ea:13:fb:7b:67:98:82:04:c5:f6:ae:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=499450bd-6432-4e5d-a29f-1c38c1ea14c6 Validity Not Before: Aug 20 02:00:08 2025 GMT Not After : Aug 22 02:00:00 2025 GMT Subject: CN=e55c0110-cb08-4acb-ad6f-57d8149807b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:09:3a:15:de:c7:0f:3e:ce:08:ff:b2:e9:ef: ab:03:d6:f4:f0:53:88:bb:ec:0a:23:35:c7:3c:5b: 04:31:12:24:8d:f6:1e:c9:de:21:eb:ab:6c:98:a2: 23:c3:aa:4a:ae:06:1e:f6:82:05:c9:31:1b:76:fa: 10:7a:88:f3:69:b8:4d:91:cb:10:10:f9:c2:68:38: 6f:10:e3:96:d5:e2:2b:80:56:dc:cb:c0:bb:e3:38: 5f:7d:ca:11:9b:e2:53:86:77:4a:8d:a6:1b:be:0c: aa:ed:9d:a5:78:dd:2a:1d:61:5e:7a:c9:4e:57:2f: 2d:3f:c0:ae:f5:49:e8:af:33:9c:a5:e8:39:32:34: 85:8a:92:17:9f:0d:bf:f5:6b:0c:71:cb:33:ed:16: 11:dd:69:f6:0e:02:ba:58:21:c1:05:bd:0e:5c:30: 31:65:20:be:ff:ab:07:3a:04:96:75:cc:7e:e7:21: 43:13:46:89:36:a3:34:bd:c8:53:fc:d6:13:ff:ba: 18:65:c0:97:c3:e4:3e:89:24:4a:2b:5f:70:68:96: f1:dd:c1:d1:df:c3:cf:60:04:a6:3d:c9:ec:e4:8b: c8:d5:eb:08:c6:62:fb:a8:bf:bb:a8:87:13:67:e6: b1:2d:53:58:c1:c9:1d:25:47:56:73:a0:ec:2d:d7: bb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:89:84:14:9C:99:98:A4:E7:F2:87:C3:FC:52:19:F3:5E:A3:BD:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.crl X509v3 Authority Key Identifier: keyid:57:9C:7D:FD:87:30:04:B7:B4:47:8D:03:30:59:10:5D:94:93:79:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:c0:43:0a:b0:76:c6:0f:1a:95:8a:49:c5:91:c4:0f:61:12: 05:e2:d7:03:01:05:4a:07:ff:b7:97:57:54:c5:07:cd:33:60: 77:f5:8f:e7:04:65:a0:ca:7d:9b:79:bc:78:a6:08:ed:d2:59: 0b:5a:d0:3c:5c:3b:67:04:ab:5e:4b:db:0b:ed:6d:41:e6:d8: c7:4d:56:14:63:c9:c8:61:78:7a:7d:92:be:21:f7:50:d3:38: f7:20:0f:1b:21:97:e7:3a:c4:be:2a:87:fb:8b:7d:d4:b9:06: 2a:2d:af:29:6a:f6:a1:0b:dc:63:f6:8d:15:fb:a2:1d:df:10: ee:ce:47:ad:e0:34:a2:f1:b0:23:93:53:19:b8:02:22:12:2f: 5c:1b:29:ae:0e:09:43:e1:c4:7b:26:1f:36:c7:53:05:19:11: 60:05:4b:12:bd:94:6d:1f:7d:36:74:15:3f:3e:6c:eb:bc:df: da:76:c7:da:86:65:5e:29:77:81:e2:8a:cf:a5:e8:69:ad:9e: 4a:b3:24:b7:64:8e:98:6a:6b:e7:c2:1e:fd:35:86:3b:c0:3e: d1:76:f7:83:0c:5b:e2:e9:cf:53:cb:87:cd:5d:dd:83:b5:53: 5e:dd:9c:10:34:69:de:84:ad:01:8b:ea:b6:cf:75:36:20:c9: f4:ef:40:22 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErqE/t7Z5iCBMX2rlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDk5NDUwYmQtNjQzMi00ZTVkLWEyOWYtMWMzOGMxZWEx NGM2MB4XDTI1MDgyMDAyMDAwOFoXDTI1MDgyMjAyMDAwMFowLzEtMCsGA1UEAxMk ZTU1YzAxMTAtY2IwOC00YWNiLWFkNmYtNTdkODE0OTgwN2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAk6Fd7HDz7OCP+y6e+rA9b08FOIu+wKIzXH PFsEMRIkjfYeyd4h66tsmKIjw6pKrgYe9oIFyTEbdvoQeojzabhNkcsQEPnCaDhv EOOW1eIrgFbcy8C74zhffcoRm+JThndKjaYbvgyq7Z2leN0qHWFeeslOVy8tP8Cu 9UnorzOcpeg5MjSFipIXnw2/9WsMccsz7RYR3Wn2DgK6WCHBBb0OXDAxZSC+/6sH OgSWdcx+5yFDE0aJNqM0vchT/NYT/7oYZcCXw+Q+iSRKK19waJbx3cHR38PPYASm Pcns5IvI1esIxmL7qL+7qIcTZ+axLVNYwckdJUdWc6DsLde79wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKeJhBScmZik5/KHw/xSGfNeo70EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OTk0 NTBiZC02NDMyLTRlNWQtYTI5Zi0xYzM4YzFlYTE0YzYvNDk5NDUwYmQtNjQzMi00 ZTVkLWEyOWYtMWMzOGMxZWExNGM2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDk5NDUwYmQtNjQzMi00ZTVkLWEy OWYtMWMzOGMxZWExNGM2LzQ5OTQ1MGJkLTY0MzItNGU1ZC1hMjlmLTFjMzhjMWVh MTRjNi5jcmwwHwYDVR0jBBgwFoAUV5x9/YcwBLe0R40DMFkQXZSTefEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OTk0NTBiZC02NDMyLTRlNWQtYTI5Zi0xYzM4 YzFlYTE0YzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAIwEMKsHbGDxqViknFkcQP YRIF4tcDAQVKB/+3l1dUxQfNM2B39Y/nBGWgyn2bebx4pgjt0lkLWtA8XDtnBKte S9sL7W1B5tjHTVYUY8nIYXh6fZK+IfdQ0zj3IA8bIZfnOsS+Kof7i33UuQYqLa8p avahC9xj9o0V+6Id3xDuzket4DSi8bAjk1MZuAIiEi9cGymuDglD4cR7Jh82x1MF GRFgBUsSvZRtH302dBU/PmzrvN/adsfahmVeKXeB4orPpehprZ5KsyS3ZI6Yamvn wh79NYY7wD7RdveDDFvi6c9Ty4fNXd2DtVNe3ZwQNGnehK0Bi+q2z3U2IMn070Ai -----END CERTIFICATE-----Generated at Wed Aug 20 17:12:29 2025 by rpki-client